Security Basics mailing list archives

RE: About default sharing folders in Windows


From: "David Gillett" <gillettdavid () fhda edu>
Date: Mon, 2 Jun 2003 14:38:16 -0700

I strongly suggest renaming the local Administrator and Guest account 
to something that is not easily guessed at.  In addition, you should 
probably create "dummy" accounts named "Administrator" and "Guest" 
that have no rights/no group memberships and are disabled.  Monitor 
the dummy accounts closely for log in attempts.

  Note that there's no point to this unless you *also* disable the ability
to enumerate accounts over a null connection.  The renamed Administrator
account will be trivial to spot by its ID otherwise.

David Gillett



---------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: